From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: bug#25935: [PATCH] gnu: mupdf: Fix CVE-2017-{5896,5991}. Date: Thu, 2 Mar 2017 13:11:50 -0500 Message-ID: <20170302181150.GA9579@jasmine> References: <87wpc7bz0u.fsf@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="LQksG6bCIzRHxTLp" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60958) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cjVCn-0001qc-9i for guix-devel@gnu.org; Thu, 02 Mar 2017 13:11:58 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cjVCk-0005bs-2z for guix-devel@gnu.org; Thu, 02 Mar 2017 13:11:57 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:48831) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cjVCj-0005bP-Rj for guix-devel@gnu.org; Thu, 02 Mar 2017 13:11:54 -0500 Content-Disposition: inline In-Reply-To: <87wpc7bz0u.fsf@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Alex Vong Cc: guix-devel@gnu.org, 25935@debbugs.gnu.org --LQksG6bCIzRHxTLp Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Mar 02, 2017 at 09:15:29PM +0800, Alex Vong wrote: > This patch (applied to core-updates) fixes the two CVEs disclosed recently. Can you send a patch for the master branch instead? The patches should be applied to mupdf/fixed in (gnu packages pdf). --LQksG6bCIzRHxTLp Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAli4YGEACgkQJkb6MLrK fwjd0hAAjpSE57Z5KTQv1uD6x9hXDRxVICftr2PxduoVarIO7abt9dN3GZpZv4br nkdw2JfYjj2a/rQeXiCvKmNJ76p4gDH6xlj7Mkzh/mIyM3QwTHELsuAP0jxpo4hZ V6/iQExO1QdCtkWqIiL+CgfyUpR11JkZDD59ApjxC6zP0nFtlcsMJyJAYiRnuOGB 1vDo95G33HTouhz8c7BvZMyMZKhH2zVMeeWJupiu3iyWPAZxzZuHvcR2/Owec0BF okZ8sxiHUHY/4yVwk70BAj2Um0ue4+0ofGoDlHH42aBEQb3Dk1xRhN6kP8jzD1qj BXc60/UplhfrNkabMNfmQIpUNeLpclOKl8gv70wVYyXxMkSL2++X7eS4YuN98QmD mQfESvnO4roJzNZ/GOWIp0DUDbOTgrnJr0NkbDpS5DbRhmt4iH+l/y2n4rw6f+An f9H2RglPvIjetzRK87+8QZ9PD9YnnRvATtl8UapUHIcHn+4KI/CUFo1NCihuMAK9 7m/7g0vkNmxZDqrAlCe7zeSCZ/iV5A7vPIBAX4N80lDhq4UnyTNf2IqcUk2D4Hvn CdAjwYFu5Y2CB9YYhcf/f/vCE7MwtLca1kuMdTqwkT000DFSL4LfHrgCSLe7jUer zSxJeLHqfjAwUatpfG15GJgjdQLs4vx1ppDXODWf/KBuXXJjyRs= =MxuH -----END PGP SIGNATURE----- --LQksG6bCIzRHxTLp--